Glossary
Zero Trust
Zero trust replaces the older assumption that anything inside a network perimeter is safe with a stricter one: no request starts out trusted, whether it originates from outside the network or from a device already sitting on it. Every request is verified on its own merits — identity, device posture, and the specific action being requested — rather than inheriting trust from its network location.
The name is sometimes misread as 'trust nothing, ever,' which is not quite right: zero trust systems still grant access, they just require it to be established explicitly and continuously rather than assumed once and left standing. In practice this means short-lived credentials over long-lived ones, per-request verification over one-time network authentication, and policy that can be enforced close to the resource being protected rather than only at the network edge.